Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
File: 87qQxx60ywFpyUhD5ccv13dQGQY.mft (raw, json)
Hash identifier: jT3/r/F/jmAE1iI+2jdlAAXaxuFLZdCiZkN2BHU7wWo=
Subject key identifier: 32:5F:36:E3:E8:FB:C0:FE:8B:EE:F9:84:8A:20:69:27:25:4A:65:1E
Authority key identifier: F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
Certificate issuer: /CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Certificate serial: 01A0CE237B51878D7809DBBB94944141229A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
Manifest number: 18C2
Signing time: Wed 23 Sep 2026 12:00:26 +0000
Manifest this update: Wed 23 Sep 2026 12:00:26 +0000
Manifest next update: Thu 24 Sep 2026 12:00:26 +0000
Files and hashes: 1: 87qQxx60ywFpyUhD5ccv13dQGQY.crl (hash: qZrgJiHZ/QcGgk/p6HYerABxgEvxNNL+PLI/rhmA5AE=)
2: HFbNCHkvFA8jkd2sknvleLz36Tg.roa (hash: fi2cqyuRcru8EJ7IltLtB/qriwTw+zg8CNvhM51ultA=)
3: UKaxkQEqDefi6Q-PAxV70oCO_r8.roa (hash: U/xm0eOwS2N25g8rhsisLKcIXoZW3KuS4QAYfKx9zWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:7b:51:87:8d:78:09:db:bb:94:94:41:41:22:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ba90c71eb4cb0169c94843e5c72fd777501906
Validity
Not Before: Sep 23 12:00:26 2026 GMT
Not After : Sep 24 12:00:26 2026 GMT
Subject: CN=325f36e3e8fbc0fe8beef9848a206927254a651e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:58:56:64:e3:49:36:39:57:74:0b:15:45:89:
c2:85:7e:3d:23:e1:c1:a2:70:1c:6d:85:a0:72:05:
ff:33:56:d6:23:84:3d:e6:ed:f2:59:00:75:9b:66:
45:62:ee:04:47:0d:98:9a:60:d5:a4:7b:23:f7:8d:
73:85:4c:50:9a:b1:97:e3:14:32:f4:8c:33:ee:2f:
17:cd:5b:42:13:18:e7:80:8b:5c:ae:6e:05:6f:15:
a4:29:42:e6:bc:69:8c:2e:d1:97:59:f2:8e:b6:e2:
88:15:81:e4:88:2e:07:dd:0f:00:87:d3:e8:4f:00:
1d:79:f4:c3:eb:ec:1c:fd:ec:26:65:e9:cc:07:ff:
d7:bf:bb:79:86:12:41:e4:33:d4:fa:8b:4e:21:2f:
af:c6:8c:d2:d9:ad:3d:f9:53:34:9f:44:c9:88:a7:
e2:26:82:9d:fd:de:88:d6:9d:04:8e:87:11:31:4a:
88:26:18:b2:88:1c:bd:a1:8e:f0:fd:3a:cd:3d:70:
b4:7d:70:25:7f:b5:ad:c9:f5:58:4f:bf:97:d8:ee:
85:e9:8b:86:0d:8f:4b:da:f2:a4:32:a1:6a:d0:82:
1b:b1:08:3e:54:1c:9f:a7:ba:cd:27:77:48:20:89:
4a:02:b2:60:f1:f7:ed:66:a3:08:45:ad:4d:fc:84:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:5F:36:E3:E8:FB:C0:FE:8B:EE:F9:84:8A:20:69:27:25:4A:65:1E
X509v3 Authority Key Identifier:
keyid:F3:BA:90:C7:1E:B4:CB:01:69:C9:48:43:E5:C7:2F:D7:77:50:19:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87qQxx60ywFpyUhD5ccv13dQGQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/abcc07-9a60-49f6-a1ef-8d52902ac830/1/87qQxx60ywFpyUhD5ccv13dQGQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8f:99:da:ed:b5:3b:d9:f9:6d:9a:04:45:2e:2e:9a:e9:f1:
90:b2:32:a9:bd:1d:db:78:04:41:a8:e2:f7:85:c6:63:b6:56:
45:d5:f7:10:1d:d4:db:11:3f:f0:06:b0:0a:60:10:79:05:b2:
d1:31:47:55:cd:29:5a:be:98:e7:10:76:58:43:40:39:f4:33:
c1:ef:71:03:f3:11:bd:2f:31:1f:7a:ca:6d:a9:a0:1c:60:76:
4f:3a:f1:74:cf:c2:ea:79:25:12:8d:6c:71:70:64:0f:59:27:
d1:9c:72:06:63:4c:31:81:44:f4:83:75:6f:b8:c9:5d:b0:b9:
24:4a:88:0d:ed:ba:f8:5e:fd:2f:9b:64:ec:73:bd:8b:32:d5:
8b:7f:98:16:78:26:6f:da:99:d7:80:79:9b:91:ad:4a:5c:99:
b1:44:df:10:d4:02:71:af:3f:2c:a7:99:d2:2c:22:cd:bb:3a:
ce:52:68:55:dc:c1:54:4f:07:16:c5:68:3f:c4:fd:72:67:a7:
68:74:4f:ba:d1:cb:82:2c:f9:2c:72:cf:a6:d3:5a:e4:65:cd:
6f:0a:0b:a3:ef:54:af:50:71:a6:97:c1:6d:51:e8:41:9e:b2:
cc:40:b2:44:b9:f7:20:80:d6:e7:62:f7:ee:b3:42:95:f4:4f:
bc:53:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:59:10 2026 by rpki-client